fixed session timeout